> perhaps it's been push on official repo from now ? Yes, it became moot. > Does the packager forgot to updated Changelogs ? Forget would be accurate if I ever remembered, "ignored" would be more on point I guess. > does those *saml*3.3.1-3 packages contains a fix ? The advisory answers that question. -- Scott